@emilia-protocol/mcp-server 1.0.1 → 1.0.4

package/index.js

@@ -60,6 +60,7 @@ import {
   CallToolRequestSchema,
   ListToolsRequestSchema,
   ListResourcesRequestSchema,
+  ListResourceTemplatesRequestSchema,
   ReadResourceRequestSchema,
   ListPromptsRequestSchema,
   GetPromptRequestSchema,
@@ -247,7 +248,7 @@ const TOOLS = [
       type: 'object',
       properties: {
         query: { type: 'string', description: 'Search query' },
-        entity_type: { type: 'string', enum: ['agent','merchant','service_provider','github_app','github_action','mcp_server','npm_package','chrome_extension','shopify_app','marketplace_plugin','agent_tool'] },
+        entity_type: { type: 'string', description: 'Optional filter — restrict results to a single entity type.', enum: ['agent','merchant','service_provider','github_app','github_action','mcp_server','npm_package','chrome_extension','shopify_app','marketplace_plugin','agent_tool'] },
       },
       required: ['query'],
     },
@@ -277,11 +278,11 @@ const TOOLS = [
     inputSchema: {
       type: 'object',
       properties: {
-        entity_id: { type: 'string', description: 'Slug (lowercase, hyphens)' },
-        display_name: { type: 'string' },
-        entity_type: { type: 'string', enum: ['agent','merchant','service_provider','github_app','github_action','mcp_server','npm_package','chrome_extension','shopify_app','marketplace_plugin','agent_tool'] },
-        description: { type: 'string' },
-        capabilities: { type: 'array', items: { type: 'string' } },
+        entity_id: { type: 'string', description: 'Unique slug for the entity (lowercase, hyphens), e.g. "acme-treasury-agent". Becomes its permanent id.' },
+        display_name: { type: 'string', description: 'Human-readable name shown in trust profiles and receipts, e.g. "Acme Treasury Agent".' },
+        entity_type: { type: 'string', description: 'What kind of actor this is — determines which trust policies apply.', enum: ['agent','merchant','service_provider','github_app','github_action','mcp_server','npm_package','chrome_extension','shopify_app','marketplace_plugin','agent_tool'] },
+        description: { type: 'string', description: 'One or two sentences on what the entity does; used for discovery and capability matching.' },
+        capabilities: { type: 'array', items: { type: 'string' }, description: 'Optional list of capability tags, e.g. ["payments","kyc"], used by ep_search_entities.' },
       },
       required: ['entity_id', 'display_name', 'entity_type', 'description'],
     },
@@ -297,7 +298,7 @@ const TOOLS = [
       type: 'object',
       properties: {
         limit: { type: 'number', description: 'Max entities (default 10, max 50)' },
-        entity_type: { type: 'string', enum: ['agent','merchant','service_provider','github_app','github_action','mcp_server','npm_package','chrome_extension','shopify_app','marketplace_plugin','agent_tool'] },
+        entity_type: { type: 'string', description: 'Optional filter — restrict results to a single entity type.', enum: ['agent','merchant','service_provider','github_app','github_action','mcp_server','npm_package','chrome_extension','shopify_app','marketplace_plugin','agent_tool'] },
       },
     },
   },
@@ -426,9 +427,11 @@ const TOOLS = [
   {
     name: 'ep_create_delegation',
     description:
-      'Create a delegation record: a human or principal authorizes an agent to act on their behalf. ' +
-      'The delegation is recorded in the EP ledger with scope, expiry, and optional constraints. ' +
-      'Every delegated action can reference this delegation to prove authorization.',
+      'Create a delegation record. WRITE: persists to the EP ledger that a human or ' +
+      'principal authorizes an agent to act on their behalf, with scope, expiry, and ' +
+      'optional constraints. Requires auth. Returns a delegation_id that later actions ' +
+      'reference (via ep_verify_delegation) to prove authorization. Use when a principal ' +
+      'grants an agent standing authority for a bounded set of actions.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -674,8 +677,10 @@ const TOOLS = [
   {
     name: 'ep_verify_commit',
     description:
-      'Verify a commit\'s signature, status, and validity. ' +
-      'Returns valid/invalid, current status, decision, and expiry.',
+      'Verify a pre-action commit — read-only, no side effects. Checks its signature, ' +
+      'status, and validity and returns valid/invalid plus the current status, decision, ' +
+      'and expiry. Use before relying on or consuming a commit to confirm it is genuine ' +
+      'and still active.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -762,9 +767,11 @@ const TOOLS = [
   {
     name: 'ep_add_presentation',
     description:
-      'Add an identity presentation (proof) to an active handshake. ' +
-      'Each party presents their identity claims for evaluation against the handshake policy. ' +
-      'Supports full, selective, or zero-knowledge disclosure modes.',
+      'Add an identity presentation (proof) to an active handshake. WRITE: appends ' +
+      'the party\'s identity claims to the handshake for evaluation against its policy; ' +
+      'supports full, selective, or zero-knowledge disclosure. Requires auth. Returns ' +
+      'the updated presentation count and handshake state. Call after ' +
+      'ep_initiate_handshake and before ep_verify_handshake.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -781,9 +788,11 @@ const TOOLS = [
   {
     name: 'ep_verify_handshake',
     description:
-      'Evaluate all presentations in a handshake against the governing policy. ' +
-      'Returns: accepted (all requirements met), rejected (policy violations), or partial (awaiting presentations). ' +
-      'Includes reason_codes explaining the outcome.',
+      'Evaluate all presentations in a handshake against its governing policy — read-only, ' +
+      'no mutation. Returns accepted (all requirements met), rejected (policy violations), ' +
+      'or partial (awaiting presentations), each with reason_codes explaining the outcome. ' +
+      'Call after the parties have added their presentations to decide whether the ' +
+      'handshake clears.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -1553,9 +1562,74 @@ const CORE_TOOL_NAMES = new Set([
   'ep_install_preflight',                         // vet software before install
 ]);
 const INCLUDE_REGISTRY_TOOLS = process.env.EP_INCLUDE_REGISTRY_TOOLS === 'true';
-const ADVERTISED_TOOLS = INCLUDE_REGISTRY_TOOLS
+
+// MCP tool annotations (title + behavior hints) — required by the Anthropic
+// directory review ("All tools must include a title and the applicable
+// readOnlyHint or destructiveHint") and useful to every client for
+// scheduling and gating. Hints describe the EP API call each tool makes.
+const READ_ONLY_TOOLS = new Set([
+  'ep_check_signoff', 'ep_dispute_status', 'ep_domain_score',
+  'ep_get_commit_status', 'ep_get_handshake', 'ep_install_preflight',
+  'ep_leaderboard', 'ep_lineage', 'ep_list_policies', 'ep_principal_lookup',
+  'ep_search_entities', 'ep_trust_evaluate', 'ep_trust_profile',
+  'ep_verify_commit', 'ep_verify_delegation', 'ep_verify_handshake',
+  'ep_verify_receipt', 'ep_verify_zk_proof',
+]);
+const DESTRUCTIVE_TOOLS = new Set(['ep_revoke_commit', 'ep_revoke_handshake']);
+const TOOL_TITLES = {
+  ep_add_presentation: 'Add Entity Presentation',
+  ep_appeal_dispute: 'Appeal Dispute',
+  ep_batch_submit: 'Batch Submit Receipts',
+  ep_bind_receipt_to_commit: 'Bind Receipt to Commit',
+  ep_check_signoff: 'Check Signoff Status',
+  ep_configure_auto_receipt: 'Configure Auto-Receipts',
+  ep_create_delegation: 'Create Delegation',
+  ep_delegation_judgment: 'Record Delegation Judgment',
+  ep_dispute_file: 'File Dispute',
+  ep_dispute_status: 'Get Dispute Status',
+  ep_domain_score: 'Get Domain Trust Score',
+  ep_generate_zk_proof: 'Generate ZK Trust Proof',
+  ep_get_commit_status: 'Get Commit Status',
+  ep_get_handshake: 'Get Handshake',
+  ep_guard_action: 'Guard Irreversible Action (Human Signoff)',
+  ep_initiate_handshake: 'Initiate Trust Handshake',
+  ep_install_preflight: 'Installation Preflight Check',
+  ep_issue_commit: 'Issue Pre-Action Commit',
+  ep_leaderboard: 'Trust Leaderboard',
+  ep_lineage: 'Get Entity Lineage',
+  ep_list_policies: 'List Trust Policies',
+  ep_principal_lookup: 'Look Up Principal',
+  ep_register_entity: 'Register Entity',
+  ep_report_trust_issue: 'Report Trust Issue',
+  ep_revoke_commit: 'Revoke Commit',
+  ep_revoke_handshake: 'Revoke Handshake',
+  ep_search_entities: 'Search Entities',
+  ep_submit_receipt: 'Submit Transaction Receipt',
+  ep_trust_evaluate: 'Evaluate Trust Policy',
+  ep_trust_gate: 'Trust Gate Decision',
+  ep_trust_profile: 'Get Trust Profile',
+  ep_verify_commit: 'Verify Commit',
+  ep_verify_delegation: 'Verify Delegation',
+  ep_verify_handshake: 'Verify Handshake',
+  ep_verify_receipt: 'Verify Trust Receipt',
+  ep_verify_zk_proof: 'Verify ZK Trust Proof',
+};
+function withAnnotations(tool) {
+  return {
+    ...tool,
+    annotations: {
+      title: TOOL_TITLES[tool.name] || tool.name,
+      readOnlyHint: READ_ONLY_TOOLS.has(tool.name),
+      destructiveHint: DESTRUCTIVE_TOOLS.has(tool.name),
+      openWorldHint: false, // every tool talks only to the configured EP API
+    },
+  };
+}
+
+const ADVERTISED_TOOLS = (INCLUDE_REGISTRY_TOOLS
   ? TOOLS
-  : TOOLS.filter((t) => CORE_TOOL_NAMES.has(t.name));
+  : TOOLS.filter((t) => CORE_TOOL_NAMES.has(t.name))
+).map(withAnnotations);
 
 server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: ADVERTISED_TOOLS }));
 
@@ -1612,6 +1686,12 @@ const RESOURCES = [
 
 server.setRequestHandler(ListResourcesRequestSchema, async () => ({ resources: RESOURCES }));
 
+// Clients (Claude included) probe resources/templates/list on startup whenever
+// a server advertises the `resources` capability. We expose no URI templates,
+// but the method must exist — without it the client gets MCP -32601
+// "Method not found" on every connect.
+server.setRequestHandler(ListResourceTemplatesRequestSchema, async () => ({ resourceTemplates: [] }));
+
 server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
   const { uri } = request.params;
   let data;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@emilia-protocol/mcp-server",
   "mcpName": "io.github.emiliaprotocol/mcp-server",
-  "version": "1.0.1",
+  "version": "1.0.4",
   "description": "EMILIA Protocol MCP Server — trust enforcement for high-risk actions via MCP. Pre-action binding, policy-bound verification, and accountable human signoff.",
   "main": "index.js",
   "type": "module",